Symantec Security Virtual Appliance (SVA) was failing to deploy on to my Esxi hosts, producing the following error in the logs and on screen:
“Unable to install SVA: com.symantec.vsep.VSEPException: bad certificate, fingerprint: 99:eb:e7:73:e1:63:54:2c:94:81:7a:aa:c3:b9:3a:67:04:73:2e:ee”
SVA_Installation.log
01 Oct 2014 16:58:31 [Installer] INFO – ———————
01 Oct 2014 16:58:31 [Installer] INFO – Symantec Endpoint Protection SVA Installer, Copyright (C) 2012 Symantec Corporation. All rights reserved.
01 Oct 2014 16:58:31 [Installer] DEBUG – Connecting to vCenter…
01 Oct 2014 16:58:31 [PasswordField] INFO – Enter the vCenter password for [administrator]:
01 Oct 2014 16:58:37 [Installer] DEBUG – Connected. Searching for host 10.40.4.14…
01 Oct 2014 16:58:37 [Installer] DEBUG – Found host 10.40.4.14
01 Oct 2014 16:58:38 [Installer] DEBUG – Installing SVA…
01 Oct 2014 16:58:38 [Installer] DEBUG – Initializing with vShield Manager…
01 Oct 2014 16:58:41 [VersionNumber] DEBUG – Version number is small: 5.0.0
01 Oct 2014 16:58:41 [PasswordField] INFO – Set the admin user password for the SVA:
01 Oct 2014 16:58:46 [PasswordField] INFO – Re-enter the admin user password:
01 Oct 2014 16:58:49 [Installer] DEBUG – Installing…
01 Oct 2014 16:58:49 [Installer] INFO – 1 – vmfs1: 480551MB free
01 Oct 2014 16:58:49 [Installer] INFO – 2 – vSwap: 727756MB free
01 Oct 2014 16:58:49 [Installer] INFO – 3 – vmfs2: 430177MB free
01 Oct 2014 16:58:49 [Installer] INFO – 4 – vmfs3: 279286MB free
01 Oct 2014 16:58:49 [Installer] INFO – 5 – vmfs4: 517274MB free
01 Oct 2014 16:58:49 [Installer] INFO – 6 – vmfs6: 566659MB free
01 Oct 2014 16:58:49 [Installer] INFO – 7 – vmfs5: 536508MB free
01 Oct 2014 16:58:49 [Installer] INFO – 8 – esxi4-sas-das: 112131MB free
01 Oct 2014 16:58:49 [Installer] INFO – 9 – vmfs7: 514768MB free
01 Oct 2014 16:58:49 [Installer] INFO – 10 – vmfs8: 422368MB free
01 Oct 2014 16:58:49 [Installer] INFO – 11 – vmfs9: 279334MB free
01 Oct 2014 16:58:49 [Installer] INFO – 12 – vmfs10: 452658MB free
01 Oct 2014 16:58:49 [Installer] INFO – On host esxi4.domain.com, which datastore would you like to install the SVA:
01 Oct 2014 16:58:52 [Installer] DEBUG – You chose: 8
01 Oct 2014 16:58:52 [Installer] DEBUG – You chose datastore: esxi4-sas-das
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Network: DMZ
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Network: Edmonton Client Network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Network: Swift
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Network: Test Network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Network: VM Network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Skipping network
01 Oct 2014 16:58:52 [VMWareHost] DEBUG – Network: vmservice-vshield-pg
01 Oct 2014 16:58:52 [Installer] INFO – 1 – DMZ
01 Oct 2014 16:58:52 [Installer] INFO – 2 – Edmonton Client Network
01 Oct 2014 16:58:52 [Installer] INFO – 3 – Swift
01 Oct 2014 16:58:53 [Installer] INFO – 4 – Test Network
01 Oct 2014 16:58:53 [Installer] INFO – 5 – VM Network
01 Oct 2014 16:58:53 [Installer] INFO – On host esxi4.domain.com, which network would you like to install the SVA:
01 Oct 2014 16:58:54 [Installer] DEBUG – You chose: 5
01 Oct 2014 16:58:54 [Installer] DEBUG – Uploading…
01 Oct 2014 16:58:55 [Installer] ERROR – ———————
01 Oct 2014 16:58:55 [Installer] ERROR – Unable to install SVA: com.symantec.vsep.VSEPException: bad certificate, fingerprint: 99:eb:e7:73:e1:63:54:2c:94:81:7a:aa:c3:b9:3a:67:04:73:2e:ee
01 Oct 2014 16:58:55 [Installer] ERROR – settings file: C:\Symantec\Installation-Files\esxi4.xml
01 Oct 2014 16:58:55 [Installer] ERROR – vcenter_ip_address=10.40.1.200
01 Oct 2014 16:58:55 [Installer] ERROR – sva_ip_address=null
01 Oct 2014 16:58:55 [Installer] ERROR – sva_gateway=null
01 Oct 2014 16:58:55 [Installer] ERROR – sva_subnet=null
01 Oct 2014 16:58:55 [Installer] ERROR – sva_dns=null
01 Oct 2014 16:58:55 [Installer] ERROR – sva_hostname=sva-04
01 Oct 2014 16:58:55 [Installer] ERROR – esx_ip_address=10.40.4.14
01 Oct 2014 16:58:55 [Installer] ERROR – vshield_ip_address=10.40.1.191
01 Oct 2014 16:58:55 [Installer] ERROR – location_of_package=C:\Symantec\Installation-Files\Symantec_Endpoint_Protection_12.1.2_Security_Virtual_Appliance_ML.ova
01 Oct 2014 16:58:55 [Installer] ERROR – datastore_prompt=1
01 Oct 2014 16:58:55 [Installer] ERROR – sylink_xml=C:\Symantec\Installation-Files\sylink.xml
01 Oct 2014 16:58:55 [Installer] ERROR – com.symantec.vsep.VSEPException: com.symantec.vsep.VSEPException: bad certificate, fingerprint: 99:eb:e7:73:e1:63:54:2c:94:81:7a:aa:c3:b9:3a:67:04:73:2e:ee
01 Oct 2014 16:58:55 [Installer] ERROR – Stack trace:
01 Oct 2014 16:58:55 [Installer] ERROR – com.symantec.vsep.vmware.VMWareHost.installSVA(VMWareHost.java:344)
01 Oct 2014 16:58:55 [Installer] ERROR – com.symantec.vsep.vmware.VMWareHost.installSecurityVirtualAppliance(VMWareHost.java:579)
01 Oct 2014 16:58:55 [Installer] ERROR – com.symantec.vsep.installer.Installer.main(Installer.java:827)
01 Oct 2014 16:58:55 [Installer] ERROR – ———————
I’ve opened a case with support and posted my problem on the Symantec forums, as it turns out this error was being produced due to an expired certificate on the SVA.OVA file, downloaded from fileconnect.symantec.com.
Support sent me a new OVA file and I’ve managed to get it deployed on all Esxi hosts straight away.
Here is the Symantec thread for anyone who is interested:
I’ve placed the file on a publicly accessible FTP server, as far as I know, Symantec have or will be replacing the file on fileconnect, however if you find it hasn’t been replaced yet, send me a message on the above thread and I’ll send you the path for the file.